100% 确定地跟踪用户
我试图通过记录他们的 IP 并阻止它来禁止向我的服务发送垃圾邮件的用户。 当然，由于 IP 地址是动态的，这根本不安全。 有没有一种 100% 安全的方法来识别用户？ 我听说过一种叫做evercookie的东西，但我很容易就能删除它，而且我想任何能够改变IP的人也可以保持他们的电脑干净......
还有其他选择吗？还是根本不可能？
I am trying to ban users that spam my service by logging their IP and blocking it.
Of course this isn't safe at all, because of dynamic IP addresses.
Is there a way to identify a user that's 100% safe?
I've heard about something called evercookie, but I was easily able to delete that, and I guess that anyone capable of changing their IP can also keep their PC clean..
Are there any other options? Or is it just not possible?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
只要用户不删除它，或关闭cookie，或使用不同的浏览器，或重新安装浏览器，或使用另一台机器等，cookie就会阻止同一浏览器访问您的网站。
不存在这样的事情100% 安全。垃圾邮件是一个持续存在的问题，大多数网站都必须学会处理。
有许多高度安全的选项，主要依赖于多因素身份验证和物理密钥生成器，例如 RSA 市场上的密钥生成器。但真正的问题是经济问题。身份验证机制越严厉，您的网站就会越快被杀死，因为您会吓跑所有访问者。
更实用的解决方案包括验证码、论坛审核、垃圾邮件报告功能等。一种特别有效的技术是阻止来自除发起它的 IP 地址之外的每个 IP 地址的违规内容。这样，最初的垃圾邮件发送者就会认为他们的内容仍然存在，而忽略了其他人看不到它的事实。
A cookie will prevent the same browser from visiting your site as long as the user doesn't delete it, or turn off cookies, or use a different browser, or reinstall their browser, or use another machine, etc.
There is no such thing as 100% safe. Spam is an ongoing problem that most websites just have to learn to deal with.
There are numerous highly secure options, mostly relying on multi-factor authentication and physical key generators like the ones RSA markets. But the real question is an economic one. The more draconian the authentication mechanism, the more quickly you kill your website as you scare off all your visitors.
More practical solutions involve CAPTCHA, forum moderation, spam-reporting affordances, etc. One particularly effective technique is to block offending content from every IP address except the one that originated it. That way, the original spammer thinks their content is still there, oblivious to the fact that no one else can see it.
好吧，我知道不可能 100% 识别唯一访客。
我可以做哪些事情：
- 查找某人（匿名）是否使用大量不同的代理来查看我的内容（这里的问题是 cookie 会落在代理的计算机上？而不是实际访问者的 PC 上？）
- 使用动态 IP 识别唯一（匿名）访客
Alright I get that it's impossible to 100% identify a unique visitor.
What are the things that I could do to:
- find whether someone (anonymous) is using lots of different proxies to see my content (problem here is that cookies would land on the machine of the proxy? and not the actual visitors PC?)
- identify unique (anonymous) visitors with a dynamic IP